The site is served by Cloudflare (no Vercel headers on any response), so vercel.json is inert. Cloudflare honours a _redirects file at the root.